Retrieve cached scan result if available and not expired. Args: target: Target string modules: Modules that w

Add a finding to the result.

Get a configured logger instance. Args: name: Logger name (typically __name__) level: Optional log level override Returns:

Run async function in sync context.

Mark the scan as complete.

Auto-detect target type from string.

Setup global logging configuration. Args: debug: Enable debug logging if True

Display scan result in a nice format.

Search for exploits matching query.

Make RPC call to Metasploit.

Get cached settings instance.

Run scans and collect results for AI analysis.

Load a wordlist from SecLists with fallback to built-in entries. Args: relative_paths: One or more SecLists-relative paths tried in order

Perform rate-limited POST request.

Create a new ScanResult for this module.

Convert to dictionary.

Export scan result in specified format. Args: result: ScanResult to export format: Export format (json, csv, html, markdown)

Check if cache entry has expired.

Ask the copilot a question about security findings. Args: question: Natural language question include_context: Whethe

Create a new ScanResult for this module.

Cache scan result. Args: target: Target string modules: Modules that were run result: ScanResult

Attach storage to scheduler and load existing data. Args: scheduler: Scheduler instance

Clear cache entries. Args: target: Specific target to clear, or None to clear all Returns:

Find tool in system PATH. Args: tool_name: Name of the tool to find Returns: Path to too

Parse OpenAPI spec from URL. Args: url: URL to OpenAPI JSON/YAML spec Returns: Parsed API specification

Calculate next run time for a schedule.

Compute checksum for cache key. Args: target: Target string modules: Modules to run options: Modu

Get basic auth tuple if configured.

Get request headers with authentication.

Get current host (simple round-robin).

Make HTTP request.

Make one NVD API call. Handles rate limiting with a single retry.

Connect and authenticate to Metasploit RPC.

Correlate findings across multiple scan results. Args: scan_results: List of scan results to correlate Returns:

Get campaign by ID.

Load scan results into copilot context. Args: results: List of scan results to analyze Returns: Correlation

Save campaign to disk.

Run a bash script in a subprocess. Returns (stdout, stderr, returncode).

Extract domain from URL or return as-is.

Parse OpenAPI specification dict. Args: spec: OpenAPI spec dictionary source: Source identifier Returns:

Parse raw NVD vulnerability list into CVE dicts. Applies client-side CVSS and publication-year filters.

Test single injection payload.

Acquire a token, waiting if necessary.

Send chat to GPT.

Run Metasploit in check-only mode for a specific CVE. No payload is staged. No session is opened. The module's check() metho

Check if tool is available. Args: tool_name: Name of the tool to check raise_error: Raise ToolNotFoundError i

Close socket connection.

Export as CSV. Args: output_path: Path to save CSV file Returns: CSV string

Get cache statistics. Returns: Dictionary with cache stats

Get target by tracking ID.

Find CVEs for a product/version combination. Args: product: Product name from nmap (e.g. "OpenSSH", "nginx")

Return the SecLists root directory if it can be found, else ``None``. Priority: 1. Explicit *seclists_path* argument. 2. ``SECSUITE_SECLI

Run external command with error handling. Args: command: Command and arguments as list tool_name: Name of the

Scan target(s) and return (services, errors). Args: target_value: IP, CIDR, range, or comma-separated list Retu

Save scheduler state to storage. Args: scheduler: Scheduler instance

Return all ATT&CK tags applicable to a finding. Checks CVE map first, then service map, then keyword heuristics.

Return the absolute path to a script in the repo's scripts/ directory.

Build context string from scan results.

Check domain reputation.

Return the matching CIDR string if target falls within any list entry, else ''.

Look up DNS information for domain.

Get cache file path for checksum. Args: checksum: Cache checksum Returns: Path to cache

Lazy load LLM client.

Get request headers.

Get index name with date substitution.

Get fuzz payloads for parameter type.

Calculate syslog priority (facility * 8 + severity).

Look up host information by IP.

Inject payload into URL parameter.

Read a wordlist file, stripping comments and blank lines, deduplicating.

Run a scan for a schedule.

Get comprehensive analysis of loaded scan results. Returns: Detailed analysis report

Apply a remediation script. Args: remediation: Output from RemediationAI.generate_*() dry_run: If True (

Audit a single password. Does not store the password — only metrics.

Close the HTTP client.